PlayReady Activation protocol ... Note

PlayReady Activation protocol issues (weak auth / fake client identities)

Posted by Security Explorations on Aug 12Dear All, PlayReady Communication Protocols [1] include services for PlayReady clients (such as Secure Clock), device owner's services (Activation / Provisioning) and content service (License Server). Back in 2022, we reported to Microsoft an issue pertaining to no auth at PlayReady license server end, which was evaluated by Microsoft as no bug. There is yet another auth issue, which builds on the above and affects PlayReady Activation...